$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft File: aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft (raw, json) Hash identifier: wb6SINx4BwcOw+P89cdC0CzuOukt2+0Szx3YXcQoeHs= Subject key identifier: 63:01:09:4A:94:6B:6F:3C:60:EE:26:86:50:6C:D0:D3:9B:0D:FC:FF Authority key identifier: 69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 Certificate issuer: /CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951 Certificate serial: 061C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft Manifest number: 0617 Signing time: Sun 10 Aug 2025 22:53:13 +0000 Manifest this update: Sun 10 Aug 2025 22:53:13 +0000 Manifest next update: Sun 17 Aug 2025 22:53:13 +0000 Files and hashes: 1: aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl (hash: H1lid4hVuVA0ygggnDOO9raoOaeXb3Er5aLJ/hCXIYg=) 2: 4BB44892AE1111EBB4C2DA11C4F9AE02.roa (hash: JNSnvB3lv0/9vnQPkUAqkaUeoo68hc8fXSyVzWlD/Po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 22:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1564 (0x61c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC146, serialNumber=690C729F18390564D670B18F7774754E5D279951 Validity Not Before: Aug 10 22:53:13 2025 GMT Not After : Aug 17 22:53:13 2025 GMT Subject: CN=689922d9-c6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:0e:c6:8a:ad:6f:51:61:19:44:2c:21:a9: 69:63:0d:d7:91:7c:c9:33:5a:23:b6:eb:dd:c5:8c: 46:13:8b:52:54:58:1f:ed:c7:b3:ec:2a:5d:f8:c1: a8:b1:c6:6c:0f:75:b2:37:9b:cf:2e:6a:01:8c:cd: 7c:18:47:c2:41:27:42:8b:7a:11:0c:e7:95:53:11: aa:ef:bf:1d:b5:cd:c4:0a:44:59:d7:af:92:97:b2: 02:4a:da:1a:62:e9:1d:53:f4:06:10:2d:f8:99:ea: e6:5f:36:56:e3:53:e2:66:66:1d:6c:a9:59:31:5e: 5d:80:eb:4f:e8:86:a2:0f:a6:59:5c:d9:3b:23:92: 49:34:90:1a:23:a2:6c:48:65:e8:b6:6d:26:5c:ef: 9a:46:0c:e0:72:8a:30:d3:80:66:87:ff:13:c2:1d: 24:84:55:2f:ec:6f:72:04:4c:83:1f:3e:41:c7:40: 17:2b:58:49:4f:13:1f:d4:fa:cf:d9:2d:37:46:27: 8e:c1:26:2c:74:67:6b:6e:90:2a:94:d1:74:1b:26: 07:21:27:d3:2f:79:a0:78:5a:81:86:24:e9:6e:e6: 53:b9:29:93:f8:d1:5e:42:07:34:58:aa:17:34:90: 05:7b:a9:29:4c:19:07:5e:fb:58:24:98:2e:05:c7: 2b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:01:09:4A:94:6B:6F:3C:60:EE:26:86:50:6C:D0:D3:9B:0D:FC:FF X509v3 Authority Key Identifier: keyid:69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:57:70:e5:c3:94:b1:52:d8:b8:c5:52:bd:6d:28:99:cb:71: ea:e5:a9:ab:98:a0:b6:23:03:f9:8f:ed:5f:8c:06:3e:af:bf: 1c:0c:08:fe:2f:a1:be:a1:13:20:61:7b:25:bb:18:4a:e1:0b: 0a:7b:06:64:f5:9d:2a:b4:db:38:02:4c:50:95:cd:b7:2b:fc: e0:f7:ec:9e:30:17:f6:34:72:1d:56:8c:94:48:c8:e7:03:b1: 84:eb:01:79:4d:e7:3d:f6:d4:81:ce:59:92:68:a1:b0:19:0e: f6:e2:95:aa:fa:9e:dd:9f:1c:f5:c5:46:8b:a4:06:67:a4:27: dd:2f:59:f7:bf:36:54:e6:ec:53:3d:00:ac:6f:fb:89:1e:fa: 13:69:c5:14:7a:c3:c5:c5:44:9b:ae:36:f2:8a:c3:76:8a:f2: 9c:2d:61:77:63:ed:4a:ac:5e:59:15:4e:87:3d:4f:e0:bd:6f: ed:6b:16:63:1e:cb:81:ac:57:aa:7d:85:d1:4e:66:86:33:5f: e5:e4:13:44:45:bb:3b:d2:0d:47:7c:81:8f:51:7d:36:20:be: a5:63:76:51:59:5d:b2:8e:ce:25:6d:23:ca:de:0d:0b:bf:93: f7:49:70:44:1e:12:dc:d6:a4:cf:d2:c1:3e:79:16:97:7e:7b: 9e:92:3a:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMxNDYxMTAvBgNVBAUTKDY5MEM3MjlGMTgzOTA1NjRENjcwQjE4Rjc3NzQ3NTRF NUQyNzk5NTEwHhcNMjUwODEwMjI1MzEzWhcNMjUwODE3MjI1MzEzWjAYMRYwFAYD VQQDEw02ODk5MjJkOS1jNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovAOxoqtb1FhGUQsIalpYw3XkXzJM1ojtuvdxYxGE4tSVFgf7cez7Cpd+MGo scZsD3WyN5vPLmoBjM18GEfCQSdCi3oRDOeVUxGq778dtc3ECkRZ16+Sl7ICStoa YukdU/QGEC34mermXzZW41PiZmYdbKlZMV5dgOtP6IaiD6ZZXNk7I5JJNJAaI6Js SGXotm0mXO+aRgzgcoow04Bmh/8Twh0khFUv7G9yBEyDHz5Bx0AXK1hJTxMf1PrP 2S03RieOwSYsdGdrbpAqlNF0GyYHISfTL3mgeFqBhiTpbuZTuSmT+NFeQgc0WKoX NJAFe6kpTBkHXvtYJJguBccrywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMBCUqU a288YO4mhlBs0NObDfz/MB8GA1UdIwQYMBaAFGkMcp8YOQVk1nCxj3d0dU5dJ5lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzE0Ni9EQUE3NjQ5MkFF MEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJXVFdjTEdQZDNSMVRsMG5t VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FReHlueGc1QldUV2NMR1BkM1IxVGwwbm1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzE0Ni9EQUE3NjQ5MkFFMEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJX VFdjTEdQZDNSMVRsMG5tVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGV3Dlw5SxUti4xVK9bSiZy3Hq5amrmKC2IwP5j+1fjAY+r78cDAj+ L6G+oRMgYXsluxhK4QsKewZk9Z0qtNs4AkxQlc23K/zg9+yeMBf2NHIdVoyUSMjn A7GE6wF5Tec99tSBzlmSaKGwGQ724pWq+p7dnxz1xUaLpAZnpCfdL1n3vzZU5uxT PQCsb/uJHvoTacUUesPFxUSbrjbyisN2ivKcLWF3Y+1KrF5ZFU6HPU/gvW/taxZj HsuBrFeqfYXRTmaGM1/l5BNERbs70g1HfIGPUX02IL6lY3ZRWV2yjs4lbSPK3g0L v5P3SXBEHhLc1qTP0sE+eRaXfnuekjqA -----END CERTIFICATE-----Generated at Tue Aug 12 22:48:29 2025 by rpki-client